getLibDesc
Static task
static1
Behavioral task
behavioral1
Sample
d855267a1831efad9c321eb8986a688251f559f716331102dc8909102fc74462.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d855267a1831efad9c321eb8986a688251f559f716331102dc8909102fc74462.dll
Resource
win10v2004-20220901-en
General
-
Target
d855267a1831efad9c321eb8986a688251f559f716331102dc8909102fc74462
-
Size
236KB
-
MD5
071312426356b68faaa4f53a82eaf2e0
-
SHA1
2526c03036fa8e50dc311454cb9f516f07d6cc72
-
SHA256
d855267a1831efad9c321eb8986a688251f559f716331102dc8909102fc74462
-
SHA512
a0687700144f9c14a6b54651ec87a06e6d2e07a303e2941f495ef7d4ce26b8efbc124d9e98a89821ec1907a8efd57bca2ed831f0cda7cb641fe2e8c4f7c3a1f9
-
SSDEEP
3072:jdsat3GS/9OjDGQuPFuuuu1onLibNxsF+4mmHTDHIkuuuxwUb5yukJJwn2L2Ko3R:/3GS1OjD7RF++HmLCN5VER
Malware Config
Signatures
Files
-
d855267a1831efad9c321eb8986a688251f559f716331102dc8909102fc74462.dll windows x86
afb85cf4ccaf1bf10a1c1a902c2f2d7e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
vray
?setParamCache@VRayParameterList@VUtils@@QAEXPADPAH@Z
?registerParameters@VRayParameterListDesc@VUtils@@QAEHPAVVRayPluginHost@2@PAVVRayPluginDesc@2@@Z
?cacheParams@VRayParameterList@VUtils@@QAEXN@Z
??0VRayParameterListDesc@VUtils@@QAE@XZ
?addParamPlugin@VRayParameterListDesc@VUtils@@QAEHPAD_KHPBD2@Z
?addParamBool@VRayParameterListDesc@VUtils@@QAEHPAD_NHPBD2@Z
??1VRayParameterListDesc@VUtils@@QAE@XZ
?getParam@VRayParameterList@VUtils@@QAEPAVVRayPluginParameter@2@PBD@Z
?setParameter@VRayParameterList@VUtils@@QAEHPAVVRayPluginParameter@2@@Z
?frameBegin@VRayPluginInterface@VUtils@@UAEXPAVVRayRenderer@2@@Z
?deleteParameterList@VRayParameterListDesc@VUtils@@QAEXPAUVRayParameterList@2@@Z
?newParameterList@VRayParameterListDesc@VUtils@@QAEPAUVRayParameterList@2@XZ
kernel32
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
Sleep
InterlockedExchange
DisableThreadLibraryCalls
msvcr80
__CxxFrameHandler3
??2@YAPAXI@Z
??_V@YAXPAX@Z
__CxxFrameHandler
??3@YAXPAX@Z
_unlock
__dllonexit
_purecall
_onexit
_decode_pointer
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
__clean_type_info_names_internal
memset
_lock
memcpy
_encode_pointer
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text1 Size: 4KB - Virtual size: 112B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 684B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE